Live data from Hacker News

Show HN: SpicyPass – A free and open-source minimalist password manager

github.com

41–50 of 113 posts

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#42

"A light-weight password manager with a focus on simplicity and security" Simplicity? Written in C++?

Although that sentence refers to the interface and feature-set, not the language on which it's built, I do tend to avoid the more complex features of C++. Is there anything in particular that you find confusing or complex about the code itself?

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#43

Earlier quoted context omitted.

If I have a keyboard, then for a relatively small dataset, such as my saved passwords, I prefer a text file over any database. Lookup workflow: decrypt file (with, say, gpg), find what I want (with, say, grep), delete decrypted file. (Not safe if you don't use disk encryption!) Update workflow: decrypt file, edit file, encrypt file, commit encrypted file to local git repo, git push to backup storage.

That sounds like a lot of work... I am entering passwords on websites 10-30 times a day... that would add up.

The 'Pass' password manager is just bash wrapper for this. It comes with 'passmenu' which is a very simple script that pipes the list of passwords to dmenu & handles the decryption using gpg. I just have a keybinding to launch it so I can copy & insert a password into any application in seconds.

[1] https://www.passwordstore.org/

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#45
post #22

How would this compare with pass[1], the "standard UNIX password manager"? Is it simply that SpicyPass uses newer cryptography than pass? Pass uses gpg along with the filesystem and git, so it is lightweight, and super-easy to backup offsite, as long as you guard your gpg keys separately. For those who want a GUI, QtPass[2] provides a simple GUI while using pass in the background. [1] https://www.passwordstore.org/ […

I'm pretty satisfied with the minimalism of pass, and thought of asking this question. The documentation is also pretty good.

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#48
post #45
post #22

How would this compare with pass[1], the "standard UNIX password manager"? Is it simply that SpicyPass uses newer cryptography than pass? Pass uses gpg along with the filesystem and git, so it is lightweight, and super-easy to backup offsite, as long as you guard your gpg keys separately. For those who want a GUI, QtPass[2] provides a simple GUI while using pass in the background. [1] https://www.passwordstore.org/ […

I'm pretty satisfied with the minimalism of pass, and thought of asking this question. The documentation is also pretty good.

I personally didn't find pass to be minimal enough (not all POSIX-y systems use bash as /bin/sh, after all), which is why I switched to pash [0]. I created some shell functions to integrate it with fzf and support multiline passwords (in which the first line is the password and following lines contain metadata like usernames). The code is in my dotfiles [1].

[0]: https://github.com/dylanaraps/pash

[1]: https://git.sr.ht/~seirdy/dotfiles/tree/master/.config/shell...

Re: Show HN: SpicyPass – A free and open-source minimalist password manager

#50
post #9

This is really cool, thanks for sharing! I personally use Bitwarden, also because it's free and open source software, and because the cloud managed option is $10 / year. I've found the GUI to be very well-made for a heavy keyboard user like me. I also second a curses-based terminal interface for password management, I think it'll be really useful!

I use bitwarden too, but I can't figure out how to get the cert to automatically update. I have port 443 served by Caddy2 and use that as a reverse proxy to Bitwarden, but Bitwarden wants to bind to 443 to update the cert. So, for now, it is a case of manually stopping Caddy, updating Bitwarden, and starting Caddy back up. The downtime is only acceptable because I only host personal stuff.
Post reply on HN